The reason sudo does not use pam_open_session() is that there is no persistent process to call pam_close_session() after the command is finished. Doing one without the other may have some negative consequences depending on what session setup is done by pam_open_session() on the particular system. - todd